Note: This bug is displayed in read-only format because
the product is no longer active in Red Hat Bugzilla.
Red Hat Satellite engineering is moving the tracking of its product development work on Satellite to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "Satellite project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs will be migrated starting at the end of May. If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "Satellite project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/SAT-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
DescriptionGarik Khachikyan
2012-04-03 09:45:19 UTC
Description of problem:
Preparing admin (all) permission for the org and assigning an "org_admin" user to that perm. still not enables for that "admin" to prepare users & permissions setup for that local Org (the section in UI is hidden and available for the real admin-superadmin only).
Version-Release number of selected component (if applicable):
Recent Katello impl.
candlepin-0.5.26-1.el6.noarch
pulp-common-1.0.0-8.el6.noarch
candlepin-tomcat6-0.5.26-1.el6.noarch
katello-glue-foreman-0.2.24-1.git.5.fbbb981.el6.noarch
katello-0.2.24-1.git.5.fbbb981.el6.noarch
katello-repos-testing-0.2.1-1.el6.noarch
katello-configure-0.2.17-1.git.0.3e1bb5b.el6.noarch
katello-candlepin-cert-key-pair-1.0-1.noarch
mod_wsgi-3.3-3.pulp.el6.x86_64
katello-common-0.2.24-1.git.5.fbbb981.el6.noarch
katello-selinux-0.2.4-1.git.0.b03a73e.el6.noarch
qpid-cpp-server-ssl-0.12-6.el6.x86_64
python-qpid-0.12-1.el6.noarch
katello-certs-tools-1.1.5-1.git.0.f153109.el6.noarch
qpid-cpp-server-0.12-6.el6.x86_64
katello-glue-pulp-0.2.24-1.git.5.fbbb981.el6.noarch
pulp-1.0.0-8.el6.noarch
qpid-cpp-client-ssl-0.12-6.el6.x86_64
katello-qpid-broker-key-pair-1.0-1.noarch
katello-cli-common-0.2.20-1.git.0.2babcce.el6.noarch
katello-cli-0.2.20-1.git.0.2babcce.el6.noarch
m2crypto-0.21.1.pulp-7.el6.x86_64
python-oauth2-1.5.170-2.pulp.el6.noarch
qpid-cpp-client-0.12-6.el6.x86_64
katello-glue-candlepin-0.2.24-1.git.5.fbbb981.el6.noarch
katello-repos-0.2.1-1.el6.noarch
pulp-selinux-server-1.0.0-8.el6.noarch
katello-qpid-client-key-pair-1.0-1.noarch
katello-agent-1.0.3-1.git.0.cccd0b4.el6.noarch
katello-cli-tests-0.2.9-1.git.0.68eeea8.el6.noarch
How reproducible:
always
Steps to Reproduce:
-create an org - org1
-create and env for that org
-add user selecting the default org: org1
-create user role: ur_org1Admin
-create permission for that role: perm_org1Admin and specify "all" for the org1
-assign that user to that permission
-logout "admin" and login by that user
-try to add a user for that org1
Actual results:
not possible
Expected results:
an Org admin should be able to handle creating users / permissions of his own org there.
Additional info:
it is as Partha states. Users don't exist *within* single orgs, they exist on a level higher than the org itself and are granted access to one or more orgs.
granting a user org_admin means they can manage orgs themselves but having the ability to create/remove users is greater access then managing orgs.